What is GHSA-mjxg-34vj-37wc?

GHSA-mjxg-34vj-37wc is a security advisory published by GitHub Security Advisories with High severity. An OS command injection vulnerability in vsDesk allows an authenticated attacker with...

Which CVE IDs does GHSA-mjxg-34vj-37wc cover?

GHSA-mjxg-34vj-37wc covers the following CVE IDs: CVE-2025-14601. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-mjxg-34vj-37wcHigh

An OS command injection vulnerability in vsDesk allows an authenticated attacker with...

Vendor

GitHub Security Advisories

Published

August 20, 2026

Last Modified

August 20, 2026

🔗 CVE IDs covered (1)

CVE-2025-14601 →

📋 Description

An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering. An attacker can exploit this flaw to disrupt web server operations, expose sensitive data, or potentially achieve full server compromise.

Apply patch from vendor https://vsdesk.ru/ . Versions 14.0101 and on have the patch.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-14601
https://github.com/klsecservices/Advisories/blob/master/KLSA-00343-vsDesk-Task-Scheduler-OS-Command-Injection.md
https://github.com/advisories/GHSA-mjxg-34vj-37wc